skysight-inc/HackerNews huggingface dataset:
This should have been pretty obvious for more technical people, but it's a nice introduction into networking and VPNs. I have configured a Linux VPN gateway VM a couple of times now and the reliance on the routing table only always felt brittle, especially when paired with running on the same machine that uses the connection.

In addition to network namespaces and physical VPN gateway routers, an architecture based on VMs can thus also solve this. In my homelab, the firewall blocks any unexpected traffic from the VPN gateway VM (devices in the VPN VLAN are not allowed any outgoing connections, the gateway VM has a separate VLAN for outgoing ones). As a personal solution, QubesOS makes configuring a similar setup quite friction-less, but once again requires more technical knowledge than a regular OS.
Even in the worst case benchmark the new strategy is only about half as slow as an insecure random number generator. However most benchmarks were much closer.

Go is doing the right balance between safety and performance for the standard library (and for the apps built on top of it). Hopefully other ecosystems follow suit.

If an application needs fast insecure random numbers - they should implement an app internal generator themselves. Having insecure randoms within easy reach is a footgun we can put away.
Ask HN : Does Bluesky have a algorithom like Twitter?
A algorithom that shows you post based on interest mixed between new and popular posts like twitter ?
I’d personally agree with your assessment, things feel pretty 50-50 to me as well with a slight edge toward Trump. This election will definitely be unusual, but I expect it will come down to the wire on Election Day again. The wild card this year is abortion, which drives huge turnout and makes people hold their noses to vote on both sides.
Dark mode support in email is one of the most frustrating things I’ve dealt with as a frontend dev who’s been coding since the IE6 days.

Basically you have to accept that you must only implement a light mode design and choose colors that will look okay when automatically inverted by all of the shoddy dark mode email client implementations.

Gmail is one of the worst offenders. You have zero recourse for picking your own colors for dark mode.
You must be joking. I write and receive emails containing lists, hyperlinks, or blockquotes all the time. I don't need the last flexbox technology, but some formatting is important.
The novel part was the age at marriage, not its length. My grandparents were married for 65+ years, and they lived roughly to a similar age also thanks to TRICARE.
The Lost World by Sir Arthur Conan Doyle.
One of the better arguments for using a CSPRNG (here, ChaCha8) is that they benchmark it within a factor of 2 of PCG. The state is still comparatively large (64 bytes vs 16), but not nearly as bad as something like mt19937 or the old Go PRNG. (If the CSPRNG was much much slower, which is generally true for CSPRNGs other than the reduced-round ChaCha variant, it becomes a less appealing default.)
> I wish there was a business reason for orgs to care about accessable and machine readable emails.

I hope the upcoming EU Accessibility Act will be enough for many organizations to finally make their emails accessible. I disable images by default in my email client, and some emails are pretty much empty without them, without providing any alternative.
It is but if I exchange emails with a Protonmail user I am writing with them like there is no encryption present.
Yes, it's a video: you can see disturbances on the surface moving / churning...
Because then Jones also needs to hire an office manager and HR unless they also want to do those things too.
Was it because of the privacy laws that they needed his agreement in the first place?

It seems he contributed, so I assume otherwise.
I was struck how much this reminded me of the Tax Revolt in Second Life forever ago. In the same way Helldivers' fans used the game's theme to shape the protest, in SL the protest took on American revolution / tea crate rebellion themes:

https://nwn.blogs.com/nwn/2003/09/tax_revolt_in_a.html
Comparing subscriptions to one-off costs makes little sense.

> Plumbers and HVAC specialists have tools worth tens of thousands of dollars.

And how many of their tools are annual subscriptions? And do their tools have residual value e.g. sell the business as a whole?
I'm quite enjoying Lattimore's translation of The Iliad. I've tried a couple of other translations which were not at all enjoyable to read.
> CSPRNG api always includes an error you need to handle (in case the sys call fails or you run out of entropy).

> Perhaps a Must/panic style API makes sense?

Yes, CSPRNGs APIs should be infallible.
I doubt Apple would sell the chips, or even rent them. And they likely won’t even make the models directly available, even as a cloud service, they’ll be embedded in products like Xcode.
That's where you end up after heavy bikeshedding. Lots of features, terrible performance, as the OP points out.
Karpenter
how to measure dev productivity? you can measure it by how many times a dev rewrites the code before the code gets merged.
That is true, but at least in theory in democracies people can vote for progressive taxation.

I'm not sure if wealth is any better distributed in autocratic countries, think Putin's Russia and its oligarchs.

Democracy is a continuum, any country can evolve into either direction. It's not like this country is democratic and that is not. Countries have more or less of it.
Can I add missing plants?
This makes many docs follow the pattern of a more complex design when its completely unnecessary. All just to get more "perf points" from the people that only have time to skim through the docs.

I read many docs that, to me, obviously made up a decision and showcased the thing we already wanted by the time the doc was started, and 2+ silly alternatives (at least one way too simple and an unnecessary overkill) and contrasted them to pick the thing that was reasonable.
MinTyML: A minimalist alternative syntax for HTML
If there’s a disk failure, the archive is useful to determine what’s missing.

If there is none, they probably restored from a backup…but that’s the trick…

Are they truly identical or does it merely seem that way…
> My pocketknife gets used literally every day, for one thing or another. Am I supposed to go knap some flint? Or will they outlaw rocks, next?

In most countries the rules seem mostly reasonable (on paper atleast) - In the UK you can carry a pocketknife if the blade is less than 3" (and its not a flick/quick open knife) and larger knives if you have "good reason" - a chef going to work, carpenter, workman etc. but not for defence when going to a night club in the city at night.

> Or will they outlaw rocks, next?

If there was an increasing spate of rock attacks on city streets, they would probably be outlawed unless you had good reason to be carrying them with you.
Yes it typically does have a runtime. For example, it has persistent structures in memory related to malloc/free, and the manipulation of those most definitely show up when you profile.
The API is the problem here. The method names in this case: getLanguageCode() and getLanguageName(), or getLanguageDisplayName() even, are much better names.
At least Bruno knows his stuff, unlike Calhoun. Believing (too long) in the conventional industry standards is to me a more forgiveable sin compared to throwing standards overboard willy nilly in the name of profit. ULA has been reliable in what they've been providing, and Vulcan looks to be a pretty capable platform - albeit it could be seen only as a bit of a plan B for the US launch industry in case Starship doesn't work out.
Yes – or a use case. Apple seems very happy to advertise that they keep their inference on-device.
Except this honestly seems worse.

Encouraging people to assume the "random" primitive is cryptographically secure is just encouraging bad practice. Making math/rand/v2 cryptographically secure might solve a problem, but it's now making something which doesn't look like it's promises security "okay".

`math/rand` functions in general though do not have the convention of being cryptographically secure - changing them so they are is just making a change to make bad code do the right thing, potentially masking the fact that if we're making that obvious mistake, what others are we also making?
The side channel attack lets the attacker determine whether or not you're trying to connect to certain IP addresses over your VPN. If you properly fix this, then even when the DHCP server is performing the attack, the traffic in question still goes through your VPN. If you just mitigate it, then when the DHCP server is performing the attack, the traffic will be dropped. The side channel is that if you just mitigate it, then the attacker can repeatedly start and stop the attack for specific IP addresses, while monitoring how much VPN traffic you're sending and receiving.
Nah. If you want to write an original work of literature, write an original work of literature. If you're writing a translation, it should reflect the original, good and bad, and you absolutely need to understand the original language to do that.
That is really cool. I basically need two features in a phone, tethering and TOTP.
Diff: https://web.archive.org/web/20240411062316if_/https://musl.c... vs https://musl.cc/

Selected sources are identical
Show HN: I Wrote "Not Another AI Chatbot"
Hi there, I built an AI chatbot and marketing tool for Shopify store owners. How is it different from other ChatGPT Chatbots?

1. Easy to Set Up:
Other ChatGPT apps require you to upload your knowledge. However, my app will automatically sync your product information as knowledge base. Once installed, the AI chatbot can work as you want. You can also test the AI answers before setting it live.

2. E-commerce Specific Features to Convert Better:
The AI can automatically recommend products and recover abandoned cart based on the user's intention.

It would be great if you guys can give a try and give me some feedback. Many thanks :)
I like mutt, but aerc [0] is imho much better. But no matter which solution you prefer, editing emails in the terminal is so much more efficient. If the majority would switch to pure text emails instead of HTML...
You're completely correct, but I think using the Angara A5 is a bit misleading. That's still in testing, and the one failure was because the exact part they were testing (the upper stage system) failed - it's more akin to something like the Starship, even if nowhere near as ambitious. It'd be more reasonable to compare something like the Soyuz-U, which has successfully sent hundreds of people to the ISS. Yet its overall failure rate is still dramatically higher than an airplane with 765 successful launches and 22 failures.

If airplanes had the same failure rates as even the most reliable rockets in existence, we'd be seeing tens to hundreds of crashes per day. Of course it's not because rockets are "allowed" to fail more regularly, but because this is the best we can currently manage.
Systemantics by John Gall: https://en.wikipedia.org/wiki/Systemantics
I just can’t argue with this. You’re using Hillary as your example for why Biden won’t be elected, when Biden has already been elected and is sitting in the White House right now. People didn’t like him in 2020 either, they clutched their pearls about how the DNC asserted control and forced Biden on us when we could’ve had Sanders, if only it weren’t for those darn black folks in South Carolina. But elections aren’t about who you like anymore, they’re about who you dislike and what that person you dislike is going to do.
I haven’t received any suspicious looking emails from them.

Short URLs aren’t necessarily suspicious and are often used to track clicks on a CTA.

Is it the mere presence of the short link that is raising suspicions for you or do the actual redirects seem suspicious as well?
Well, she is a “nymphette” in the book. That novel is so well written and not even in the author’s native language.
They somewhat fixed that with "async def" but the whole thing is a huge tragedy anyway.
Kubrick’s film simplified the psychological depth and literary nuances of Vladimir Nabokov's 1955 novel, adapting its themes and character dynamics to fit both the cinematic form and the censorship norms of its time. Constrained by the Hays Code and societal taboos of the 1960s, it toned down the explicitness of the sexual elements of the story. The was more overt humor and satire in the film, partly as a way to address the censorship regulations of the time. This approach changes the tone from the intensely personal and tragic to something lighter and more accessible, though still deeply disturbing.

Note that Nabokov was credited as the screenplay writer for the movie (Kubrick is uncredited). https://www.imdb.com/title/tt0056193/fullcredits/
Not really. Tor, I2P, and Monero manage this just fine. Building on these technologies should allow one to have privacy and anonymity without any exotic quantum technology.
Proof of the Geometric Langlands Conjecture Part 1/5
I install Uber to use it when I need it because I only need it occasionally, and I deinstall it after I've used it. Solves spam and prvacy issues.
Thank you very much. It’s very helpful.
I don't think a contract still stands when one of the party do not exists anymore.

And dead people don't have rights past what they have decided on inheritance and even this can be sometimes overturned by justice. This is the reason wealthy people sometimes give their wealth to a foundation but if the foundation doesn't find a way to make it sustainable and money runs out it also ends up dissolved regardless of the cause it was bound to serve.
WolfSSL TLS 1.3 client man-in-the-middle attack (2020)
Vision as well.

Luxottica manufactures and wholesales 25% of all sunglasses and prescription frames in the world (Oakley, Ray Ban, Chanel, Coach, etc). They own the second largest vision insurance company. 20% of US and 10% of worldwide retail sales are in one of their 9,100 stores: LensCrafters, Pearle Vision, Target Optical, Sunglass Hut, Glasses.com, etc. If you decide to go to a local independent optometrist, they also own the two largest equipment manufactures.
Nostalgia on the internet, particularly with social networks / online communities, is real and I do think there will be a revival of the 'old way' of how folks communicated online.

Hacker news is a good example of this that's persisted, actually.

But I'm hopeful we get some social networks that are more like the old web in their architecture.
You get that kind of people with anything really: bread, wine, cheeses, chocolate and food in general.

There are those who care about the quality, craftsmanship and taste, since they can enjoy it, and then those who just see those as a good way to get something specific (booze, calories, umami, etc.)

To be totally honest, the ones who care are the people who, whether people like it or not, want the product to be at its best form and shape.
Of course you are right, if majority of individuals were informed and if protonmail was proactive in informing their users about short commings. The problem is that most users are not informed and they think that protonmail is the bee's knees of email privacy and security, while protonmail only promotes that myth.
At the core, Fortran uses multidimensional numerical arrays, with the shapes being defined being defined in the code. So the compiler knows much more about the data that’s being operated on, which in theory allows better optimization.

I thought blas/lapack is still written in Fortran, so most numerical code would still be built on top of Fortran.
Because someone posted it and others upvoted the post. I know that's stating the obvious but that's the reason and there doesn't need to be any other.
I heard all this hubbub about Mint going away, but I think it just rebranded. Now it’s part of the Credit Karma app and it still works, my accounts are all still there.

It reminds of the HBO/Max thing. Seems like a braindead decision to try to force all of your customers to install a new app to keep existing functionality. It’s like acquiring all your customers all over again. You’re bound to lose a bunch. Even if it’s downstream of some corporate reorganization, why not keep both apps around in the App Store and just update the branding? If there’s a technical migration happening, even if it’s a totally new code base, can you not ship that as an update and just exist in the App Store under multiple names?
I think authors already did admit that introducing two rand packages was a mistake, so they're now just correcting (most) programs automatically so that the existing packages become more secure, and raising awareness that math/rand should no longer be used. I think it's the best they can do in this situation
Still there in Germany https://www.google.de/search?q=elektrorasierer+test
AGI fascinates me. We seem so close to it, at least with text for now, and soon video. With audio too, if you've seen Suno and Udio, you know where the music industry is headed in terms of disruption.

AGI seems to be very loosely thrown around today. I started writing from experience and from a place of passion for the field. My grad school work thrust me into this world, and I've been following the space ever since. It seems at it's peak now, and amidst all the hype I thought of sharing my take on it.

More to come here, but feel free to share your thoughts. Feedback welcome.
The refurbishment did present a problem for SpaceX, iirc.

It’s just that Elon seems to have a knack for managing Manufacturing Engineers and got Merlin production and refurb down to not just science, but magic.
A "Boring" XSS Discovered in Google
Yeah, that's some minimal progress, but really not that interesting. (As in, it's cool that it exists, but given we've got Python stdlib and numpy already open, it's not really new/exciting) And doesn't allow you to port to platforms they don't care enough about.
How will you know if you have non-linear data....
AI at work. /s
Link to David Beazley’s asyncio talk: https://youtube.com/watch?v=Y4Gt3Xjd7G8
> They don't need to write any rationale on why they made it

Just next tho the "experimental" moniker, and within an actual section about Rubocop, they in fact did provide a simple rationale anyway.

Checks out for me (even if they didn't have to provide any).

(emphasis mine)

> Why Not RuboCop?

> In most cases you likely want to use RuboCop as it has more robust support and testing. This gem is currently more experimental and focused exclusively on refactoring and AST manipulations in a more minimal sense.
No, this is not true.

Teenagers these days are convinced that all stress is anxiety, all sadness is depression, and all negative emotions besides anger are sicknesses that must be treated with therapy and/or chemicals.

See also https://www.nytimes.com/2023/11/18/opinion/teenagers-mental-...
Intern, not employee. Funnily enough, it's allowed to let them work for free, but not for money.
Yep, that just emphasises how stupid the standard is. Others have mentioned Westward Ho![0] which is in England and contains a non-alphanumeric character.

For Wales for sure, often there are two versions of the place name, the Welsh, and an English butchering of it (see for example Pont-y-pŵl, which is spelt Pontypool in English), so I suppose it would be the English thing to do to simply pretend the Welsh/Irish spelling doesn't matter, and only use the English spelling (a little tongue-in-cheek from my side, but sadly likely the reality).

However, I suspect that whoever authored the standard was just sloppy and wrote 'alphanumeric' without giving it any careful thought.

[0]: https://en.wikipedia.org/wiki/Westward_Ho!
True for every employer i've ever been at. Your career is mostly steered by exposure, rather than reputation or ability. Design docs are very visible to those above you. At yvery company I join, I propose we start writing design docs. It immediately puts me in good standing with management :)
I dunno. I switched over to https://lunchmoney.app/. But it was so frustrating wading through all the bad search results to find it.
> The readers? The only thing that makes a translation great for them is whether the translated text reads well. Whether the translation is accurate to the source material is irrelevant; the readers literally can't tell and don't care, that's why they are reading a translation!

On the contrary, readers generally read a translation because they want to read a specific work, and/or experience the culture it's part of, but can't or won't spend what it would take to become fluent in the language themselves. If they just wanted to read something that reads well they wouldn't be reading a translation. So accuracy is something they care deeply about, even - especially - if they're poorly qualified to assess it.

> being a translator is terrible; the absolute worst thing about it is that the work is thankless. Whoever reads your translations simply can't appreciate quality

Well, yes. It's like sound design, or colour grading, or stage magic; when you do it right, the audience doesn't notice that you've done anything at all. It certainly takes a certain mentality to thrive in.
A lot of technical issues are very controversial.

It can be difficult to discuss inside an enterprise because everyone’s already so committed to a particular solution.

People have very strong opinions about crypto, SPAs, and CDNs.
Unfortunately yes. The fact that you cannot do anything without a partner is truly mind boggling. From what I have learned so far, you end up paying anywhere between 1x-3x of the licence cost to the partner just to get it implemented and make small changes here and there. It's crazy how high the TCO of this software is in this day and age.
great article. retro dodo was also hit https://retrododo.com/google-is-killing-retro-dodo/
In a previous case some years ago, a French activist’s IP address was provided by Proton on court order. Proton does store IP address and does provide it when legally demanded to.
Dehumanizing people, what an awful human being.

> hammer and sickle

Why am I not surprised.

His coworkers probably treat him the way he complains about because it is usually his fault and he's insufferable at work.
a minor point but you can't _encrypt_ source IPs, you can only obfuscate or more accurately, proxy.
Design doc culture at google is why I left the company.

I wrote a very high level doc shortly after joining the company outlining a fairly trivial task (one that has been performed many times across other product areas).

A colleague virtually took me aside and told me "this is not how we do things here". Which was kind of a wake up call as he told me to make sure to 'evaluate many more ways to get this done' despite the way I outlined literally being a slight variation on the recommended way.

When questioned about why this would be needed he said "it shows broad consideration".

"Fake work" is very much a thing at google, I wish I joined a different team.
From the article, it appears the big sadness for the author was he wrote back and said he was happy to work with Kubrick to discuss getting it to where he was more comfortable with it, Kubrick never responded, and then sent lawyers. That's all that's rough for the writer, here.
You're right. Numpy stores arrays in row-major order by default.
One can always just have a look at the flags (ndarray.flags returns some information about the order and underlying buffer).
I think Sweden is pretty similar to Finland in this regard. So 13 year old can do this type of office work, but it is not allowed to impact school and only for half of the holiday length. Also some other limitations on length of work day.